On March 20, 2025, CSG Consultants (“CSG”) filed a notice of data breach with the Attorney General of New Hampshire after discovering suspicious activity on its network that turned out to be a cyberattack. In this notice, CSG explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, Social Security numbers, dates of birth, and addresses. Upon completing its investigation, CSG began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.
If you received a data breach notification from CSG Consultants, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the CSG Consultants data breach. For more information, please see our recent piece on the topic here.
What Caused the CSG Consultants Data Breach?
The CSG Consultants data breach was only recently announced, and more information is expected in the near future. However, CSG’s filing with the Attorney General of New Hampshire provides some important information on what led up to the breach. CSG also posted a website notice that provides additional details about the incident.
According to these sources, In August 2024, CSG identified suspicious activity within its computer network. In response, CSG secured its systems and then launched an investigation with the help of outside cybersecurity experts. Through this investigation, CSG confirmed that an unauthorized party had gained access to CSG’s IT systems. On January 14, 2025, CSG determined that the unauthorized actor had access to files and folders containing confidential consumer information.
After learning that sensitive consumer data was accessible to an unauthorized party, CSG Consultants reviewed the compromised files to determine what information was leaked and which consumers were impacted. CSH completed this process on February 28, 2025, and while the breached information varies depending on the individual, it may include your name, Social Security number, date of birth, and address.
On March 20, 2025, CSG Consultants sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.
More Information About CSG Consultants
CSG Consultants, Inc. is an employee-owned firm providing comprehensive municipal services exclusively to public agencies. Headquartered in Foster City, California, the company offers a range of services, including building plan review and inspection, fire prevention, civil and structural design, development and map review, construction management, planning, code enforcement, sustainability program support, and information technology services. With a focus on delivering successful projects and supplying contract resources, CSG Consultants has been a trusted partner to public agencies for over 30 years. The organization employs approximately 460 people and generates an estimated $14 million in annual revenue.
